From the course: Application Security Testing and Debugging
Unlock this course with a free trial
Join today to access over 25,300 courses taught by industry experts.
Injection attack mastery
From the course: Application Security Testing and Debugging
Injection attack mastery
Welcome to this video of Injection Attack Mastery. Here is a critical challenge in Injection Attack Mastery. Basic injection payloads are easily detected by modern security controls. Sophisticated injection techniques require advanced payload crafting, bypass, strategies, and exploitation chaining that escalates simple injection flaws into complete system compromise. In this video, we will execute SQL injection with advanced payloads, demonstrate cross-site scripting attack techniques, apply command injection exploitation methods, and craft payloads that bypass modern security controls. By the end of this video, you will be able to execute string and numeric SQL injection attacks, demonstrate reflected XSS payload injection, apply command injection exploitation techniques, craft payloads that evade security filters. Let's start by examining SQL injection techniques using WebCode and OWASP ZAP. Now, in this video, we're going to use WebCode and WERP so that we can find out more how…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.